last executing test programs: 10.062287885s ago: executing program 4 (id=219): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r2 = dup2(r1, r0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="10002cbd7000fedbdf25550000000800010059000000666cda18996e13f0702ec2e359f1a9a5f679e9eeb0705d18c1d34647a2c28956040b9a8306c33ff253c401a45fba3c7c6c7bfcf2aab07146704353abc2bdc23b2f3cccb76283b38f9a31b7b9db4e004fbd2a"], 0x1c}, 0x1, 0x0, 0x0, 0x2400e814}, 0x4000090) 8.825026731s ago: executing program 4 (id=226): timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndmidi(&(0x7f0000000cc0), 0x2, 0x141102) writev(r1, &(0x7f0000000d00)=[{0x0}], 0x1) 8.35024318s ago: executing program 4 (id=230): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000900)={0xc, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x2, 0x101000) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 7.547737711s ago: executing program 4 (id=233): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2100, 0x2b7, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6.668277501s ago: executing program 4 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x110) 4.751527986s ago: executing program 3 (id=245): io_submit(0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0xffeffffffffffffa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000480)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000005c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) pause() r5 = gettid() timer_create(0x0, &(0x7f0000000640)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000680)) timer_settime(0x0, 0x0, &(0x7f00000006c0)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 4.105005032s ago: executing program 2 (id=248): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}]]}, 0x24}, 0x1, 0x0, 0x0, 0x40049d0}, 0x20000000) 3.915713371s ago: executing program 2 (id=249): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c7a751900acf81658badb5d287b4", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.672074706s ago: executing program 2 (id=250): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0xa40, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@s={0x5, @SEQ_MIDIPUTC=0x9f, 0x7, 0xa1}) 3.63260962s ago: executing program 1 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x1000a) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000d00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r2, 0x0, 0x3c, 0x72, &(0x7f0000000dc0)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000e00)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000f80)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='270', 0x3) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4c00, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f00000009c0)={0x4, 0x0, 0x0, 0x228, 0x138, 0x1, 0x0, 0xa010, 0x0, 0x0, @by_dev={r5}, [@crypt={0x0, 0x2080, 0x0, 0xf0, 'crypt\x00', {'aes:2-cbc-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '1024', 0x20, {@ram_num={'1:', 0x0}, 0x20, '16'}, ' 1 same_cpu_crypt'}}]}) r6 = fsopen(&(0x7f0000001100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001140)='fsid\x00', &(0x7f0000001180)='00000000-0000-0000-0000-000000000000\x00', 0x0) 3.460041998s ago: executing program 3 (id=253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) 3.459820688s ago: executing program 2 (id=254): timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndmidi(&(0x7f0000000cc0), 0x2, 0x141102) writev(r1, &(0x7f0000000d00)=[{0x0}, {0x0}], 0x2) 2.977133257s ago: executing program 2 (id=255): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$dlm_plock(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000400)) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000380), 0xf2da, 0x100) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xffff, 0x10, 0x2, 0x10000, 0xe, 0x8000, 0x7, 0x7, 0x4e}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) r8 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r8, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) 2.216849384s ago: executing program 0 (id=256): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, 0x0}, 0x20) landlock_create_ruleset(&(0x7f0000000480)={0x15020, 0x3, 0x1}, 0x18, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r1, 0x1c, &(0x7f0000000680)={{0xa, 0x4ea2, 0x7, @remote, 0x2}}}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$DM_DEV_CREATE(r6, 0xc138fd03, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r6, 0xc138fd09, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x1400, 0x0, 0x78, 'integrity\x00', {{@ram={'/dev/ram', 0x0}, 0x20, '0'}, 0x20, '16', 0x20, 'J', ' 1 journal_crypt:ctr(aes):0123456789abcdef0123456789abcdef'}}]}) 2.093083237s ago: executing program 1 (id=257): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000900)={0xc, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x2, 0x101000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.96005823s ago: executing program 3 (id=258): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) bind$inet(r2, &(0x7f0000000140)={0x2, 0x15, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r4, &(0x7f0000000400)='PASV\r\n', 0x6) r5 = accept4(r2, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) 1.66784622s ago: executing program 0 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x60, r1, 0x1, 0x70bd27, 0x25dfdc06, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0xfffffffffffffcc5, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x9}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x81}, 0xf0) 1.559485231s ago: executing program 3 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c7a751900acf81658badb5d287b4", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.236109814s ago: executing program 1 (id=261): syz_emit_ethernet(0x32, &(0x7f0000000400)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, {0x2001, 0x880b, 0x8}}}}}, 0x0) 1.229189685s ago: executing program 0 (id=262): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000500)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 1.08587761s ago: executing program 2 (id=263): socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select ', 0xf) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r2, 0x0, 0x700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_create_ruleset(&(0x7f0000000040)={0x10112, 0x0, 0x1, 0x10, 0x2, 0x3}, 0x30, 0x2) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r6, 0xc08c5114, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 875.994571ms ago: executing program 1 (id=264): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10004}, 0x30, 0x0) setns(0xc9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) close(r1) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x120, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r2, 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="50000000100005060100000000000000000000000000000001000000010000000c00030076786c616e300000240012000a00010076786c616e00000014000200080001002a0000000600050012b50000", 0x50) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[], 0x32600) r7 = socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000880)=r9, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x25d6dbfc, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) renameat2(r6, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3) pread64(r2, &(0x7f0000000200)=""/72, 0x48, 0x10) 875.837571ms ago: executing program 3 (id=265): timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndmidi(&(0x7f0000000cc0), 0x2, 0x141102) writev(r1, &(0x7f0000000d00)=[{0x0}, {0x0}], 0x2) 703.733128ms ago: executing program 0 (id=266): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000440)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)='N', 0xffe0}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @local}}, 0xaa, 0x0, 0x9, 0x8, 0x6}, &(0x7f0000000640)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000680)={r1, 0xffffffffffffffff, 0x800}, &(0x7f00000006c0)=0xc) 453.313154ms ago: executing program 4 (id=267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x1000a) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000d00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r2, 0x0, 0x3c, 0x72, &(0x7f0000000dc0)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000e00)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000f80)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='270', 0x3) r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4c00, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f00000009c0)={0x4, 0x0, 0x0, 0x228, 0x138, 0x1, 0x0, 0xa010, 0x0, 0x0, @by_dev={r5}, [@crypt={0x0, 0x2080, 0x0, 0xf0, 'crypt\x00', {'aes:2-cbc-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '1024', 0x20, {@ram_num={'1:', 0x0}, 0x20, '16'}, ' 1 same_cpu_crypt'}}]}) r6 = fsopen(&(0x7f0000001100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001140)='fsid\x00', &(0x7f0000001180)='00000000-0000-0000-0000-000000000000\x00', 0x0) 308.104229ms ago: executing program 0 (id=268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) 251.670795ms ago: executing program 0 (id=269): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, 0x0}, 0x20) landlock_create_ruleset(&(0x7f0000000480)={0x15020, 0x3, 0x1}, 0x18, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r1, 0x1c, &(0x7f0000000680)={{0xa, 0x4ea2, 0x7, @remote, 0x2}}}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$DM_DEV_CREATE(r6, 0xc138fd03, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r6, 0xc138fd09, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x1400, 0x0, 0x78, 'integrity\x00', {{@ram={'/dev/ram', 0x0}, 0x20, '0'}, 0x20, '16', 0x20, 'J', ' 1 journal_crypt:ctr(aes):0123456789abcdef0123456789abcdef'}}]}) 215.376958ms ago: executing program 1 (id=270): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) bind$inet(r2, &(0x7f0000000140)={0x2, 0x15, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r4, &(0x7f0000000400)='PASV\r\n', 0x6) r5 = accept4(r2, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) 46.763875ms ago: executing program 3 (id=271): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000900)={0xc, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x2, 0x101000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=272): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f0000000400)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 67.107976][ T4260] cgroup: Unknown subsys name 'net' [ 67.209961][ T4260] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.743055][ T4260] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.326691][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.334661][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.334862][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.343436][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.349942][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.356612][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.364611][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.370327][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.377382][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.391727][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.392101][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.398899][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.406715][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.420890][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.421409][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.435052][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.435744][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.454784][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.462118][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.463024][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.469700][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.483960][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.492042][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.512426][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.512464][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.527694][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.531676][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.543575][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.551433][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.559160][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.614356][ T4274] rdma_rxe: rxe_register_device failed with error -23 [ 70.629278][ T4283] rdma_rxe: rxe_register_device failed with error -23 [ 70.637372][ T4274] rdma_rxe: failed to add rxe_eth0 [ 70.641851][ T4289] rdma_rxe: rxe_register_device failed with error -23 [ 70.652758][ T4275] rdma_rxe: rxe_register_device failed with error -23 [ 70.659657][ T4275] rdma_rxe: failed to add rxe_eth0 [ 70.675619][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.693628][ T4289] rdma_rxe: failed to add rxe_eth0 [ 70.703043][ T4283] rdma_rxe: failed to add rxe_eth0 [ 70.712638][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.732143][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.894280][ T4279] infiniband rxe0: set active [ 70.899144][ T4279] infiniband rxe0: added rxe_eth0 [ 70.912633][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.952563][ T4279] RDS/IB: rxe0: added [ 70.957169][ T4279] smc: adding ib device rxe0 with port count 1 [ 70.963756][ T4279] smc: ib device rxe0 port 1 has pnetid [ 70.991688][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.003728][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.069568][ T4263] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.115083][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 71.176960][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 71.241867][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.366292][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.382937][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.391589][ T4289] device bridge_slave_0 entered promiscuous mode [ 71.436988][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.443617][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.458692][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 71.486808][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.512969][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.521227][ T4289] device bridge_slave_1 entered promiscuous mode [ 71.538318][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.546013][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.554486][ T4274] device bridge_slave_0 entered promiscuous mode [ 71.576892][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 71.588496][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.619467][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.627763][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.643940][ T4274] device bridge_slave_1 entered promiscuous mode [ 71.698749][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.758739][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.826702][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.844336][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.903526][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.913359][ T4289] team0: Port device team_slave_0 added [ 71.938304][ T4289] team0: Port device team_slave_1 added [ 71.959869][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.967279][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.981159][ T4275] device bridge_slave_0 entered promiscuous mode [ 71.991803][ T4274] team0: Port device team_slave_0 added [ 72.040855][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.049189][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.058266][ T4283] device bridge_slave_0 entered promiscuous mode [ 72.066240][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.074790][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.083219][ T4275] device bridge_slave_1 entered promiscuous mode [ 72.091663][ T4274] team0: Port device team_slave_1 added [ 72.116751][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.132884][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.141154][ T4283] device bridge_slave_1 entered promiscuous mode [ 72.200267][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.208580][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.237803][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.258690][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.279490][ T4279] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.287204][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.303037][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.329821][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.341942][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.349872][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.376284][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.394325][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.414679][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.429984][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.447989][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.476740][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.506971][ T4275] team0: Port device team_slave_0 added [ 72.519988][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.549915][ T4275] team0: Port device team_slave_1 added [ 72.556745][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 72.556748][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 72.563125][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 72.633273][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 72.633288][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 72.663746][ T4274] device hsr_slave_0 entered promiscuous mode [ 72.671808][ T4274] device hsr_slave_1 entered promiscuous mode [ 72.697587][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.710552][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.753121][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.769733][ T4289] device hsr_slave_0 entered promiscuous mode [ 72.783529][ T4289] device hsr_slave_1 entered promiscuous mode [ 72.790318][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.803861][ T4289] Cannot create hsr debugfs directory [ 72.830616][ T4283] team0: Port device team_slave_0 added [ 72.838028][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.846134][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.872814][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.910964][ T4283] team0: Port device team_slave_1 added [ 73.051449][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.059341][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.085684][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.128714][ T4275] device hsr_slave_0 entered promiscuous mode [ 73.136196][ T4275] device hsr_slave_1 entered promiscuous mode [ 73.143320][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.151010][ T4275] Cannot create hsr debugfs directory [ 73.160740][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.168735][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.200051][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.347457][ T14] rxe_eth0 speed is unknown, defaulting to 1000 [ 73.388518][ T4283] device hsr_slave_0 entered promiscuous mode [ 73.396752][ T4283] device hsr_slave_1 entered promiscuous mode [ 73.404193][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.411786][ T4283] Cannot create hsr debugfs directory [ 73.563708][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.583891][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 73.616253][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.660272][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.735476][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.834495][ T4289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.911257][ T4289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.972254][ T4289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.019404][ T4289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.059033][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.067262][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.077377][ T4279] device bridge_slave_0 entered promiscuous mode [ 74.087296][ T3936] infiniband rxe0: set active [ 74.104993][ T4263] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.112824][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.119960][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.129692][ T4279] device bridge_slave_1 entered promiscuous mode [ 74.192399][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.205494][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.217864][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.227669][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.246167][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.260850][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.289735][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.308742][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.322070][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.336866][ T4279] team0: Port device team_slave_0 added [ 74.345228][ T4279] team0: Port device team_slave_1 added [ 74.386422][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.401836][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.409840][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.436767][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.452239][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.459794][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.486169][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.501801][ T4283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.535158][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.550597][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.560982][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.568242][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.579057][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.588143][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.596687][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.603813][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.611463][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.621442][ T4283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.631437][ T4283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.632879][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 74.642802][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 74.645968][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 74.698871][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.712845][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 74.712858][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 74.734260][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.753477][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.775210][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.787426][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.796147][ T4283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.818704][ T4279] device hsr_slave_0 entered promiscuous mode [ 74.828964][ T4279] device hsr_slave_1 entered promiscuous mode [ 74.836438][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.844375][ T4279] Cannot create hsr debugfs directory [ 74.895179][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.905009][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.913784][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.922113][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.947122][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.961949][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.987607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.996653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.080141][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.135845][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.144968][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.158119][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.224501][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.235300][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.244382][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.251502][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.260209][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.270086][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.279358][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.286494][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.295727][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.324548][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.338855][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.359043][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.377461][ T4279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.402135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.419068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.430198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.452000][ T4279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.464956][ T4279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.475076][ T4279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.504210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.514404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.525175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.534978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.543574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.552055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.573927][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.580793][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.595395][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.615633][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.627605][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.636311][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.645514][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.654322][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.661436][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.670038][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.697499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.706717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.717506][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.724674][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.734027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.741578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.771946][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.787320][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.802613][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.820543][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.830888][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.880503][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.894824][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.910348][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.920770][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.930364][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.951971][ T4275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.963776][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.986579][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.995776][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.015544][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.034553][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.058527][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.083832][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.120099][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.133287][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.140859][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.149053][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.158475][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.168611][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.175772][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.184800][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.192586][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.227795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.238194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.247913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.294972][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.329240][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.344800][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.359544][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.369777][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.382327][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.390276][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.430015][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.438398][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.449598][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.458223][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.466023][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.476741][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.492104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.501427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.510359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.518860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.527948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.536483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.559404][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.574636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.587866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.597839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.607258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.616179][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.623331][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.631179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.640602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.649357][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.656530][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.665121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.673446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.681285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.699705][ T4274] device veth0_vlan entered promiscuous mode [ 76.709622][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.717151][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 76.717212][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 76.723350][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 76.760164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.775047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.788359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.793510][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 76.798245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.802607][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 76.835083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.851384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.860900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.880722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.900443][ T4274] device veth1_vlan entered promiscuous mode [ 76.930452][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.942129][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.957904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.973677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.981747][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.990591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.000089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.009301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.018507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.027573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.037168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.069512][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 77.081356][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.098866][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.113737][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.122618][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.138080][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.160646][ T4275] device veth0_vlan entered promiscuous mode [ 77.197363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 77.207033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.224805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.246661][ T4289] device veth0_vlan entered promiscuous mode [ 77.264733][ T4275] device veth1_vlan entered promiscuous mode [ 77.273310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.281099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.317936][ T4289] device veth1_vlan entered promiscuous mode [ 77.357809][ T4274] device veth0_macvtap entered promiscuous mode [ 77.366422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 77.374795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.383494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.400965][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.415891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.427498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.439703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.488794][ T4274] device veth1_macvtap entered promiscuous mode [ 77.504652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 77.514300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.522392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.539829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.551915][ T4275] device veth0_macvtap entered promiscuous mode [ 77.579889][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.592875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.601181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.624296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.643438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.654014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.666387][ T4289] device veth0_macvtap entered promiscuous mode [ 77.678542][ T4275] device veth1_macvtap entered promiscuous mode [ 77.689876][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.711156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.719399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.727636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.737048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.746107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.755241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.764438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.772071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.782373][ T4289] device veth1_macvtap entered promiscuous mode [ 77.795614][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.804945][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.814309][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.824663][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.846424][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.865197][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.881939][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.895471][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.921676][ T4283] device veth0_vlan entered promiscuous mode [ 77.933143][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.944697][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.953540][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.962413][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.971954][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.992360][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.016557][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.030488][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.044032][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.051815][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.060250][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.069811][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.093535][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.102562][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.119737][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.128571][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.151472][ T4283] device veth1_vlan entered promiscuous mode [ 78.162222][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.173588][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.183821][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.194330][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.206339][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.235336][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.244294][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.256763][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.278377][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.289163][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.302320][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.315109][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.361163][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.379527][ T4289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.397585][ T4289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.410059][ T4289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.421959][ T4289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.453732][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.471689][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.576550][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.592461][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.603493][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.613056][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.651849][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.663605][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.667971][ T4283] device veth0_macvtap entered promiscuous mode [ 78.705714][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.715267][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.730605][ T4279] device veth0_vlan entered promiscuous mode [ 78.755143][ T4283] device veth1_macvtap entered promiscuous mode [ 78.764867][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.777657][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.785319][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.786844][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.800693][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 78.800730][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 78.803227][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 78.815902][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.830233][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.842258][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.851875][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.873606][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 78.879652][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 78.901534][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.913264][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.924782][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.935478][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.945995][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.958824][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.971081][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.985817][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.996566][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.007017][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.020094][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.030511][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.041572][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.053756][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.066625][ T4279] device veth1_vlan entered promiscuous mode [ 79.074701][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.084917][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.094153][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.106799][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.125804][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.134848][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.142545][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.151942][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.166730][ T4283] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.179473][ T4283] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.188316][ T4283] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.200209][ T4283] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.230368][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.230772][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.239292][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.267922][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.347459][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.376434][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.383786][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.393962][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.405628][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.420878][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.449357][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.506302][ T4279] device veth0_macvtap entered promiscuous mode [ 79.593394][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.632578][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.876213][ T4279] device veth1_macvtap entered promiscuous mode [ 80.328736][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.340011][ T4412] misc userio: No port type given on /dev/userio [ 80.348800][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.360274][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.370955][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.381959][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.397693][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.409632][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.419722][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.430368][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.442376][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.474082][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.487915][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.523049][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.547602][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.565886][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.573977][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.581819][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.600647][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.610740][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.625717][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.639344][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.659849][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.688437][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.705811][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.721481][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.740923][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.779521][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.800917][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.820516][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.854741][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.895717][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.924501][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.948574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.122381][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.173110][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.226682][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.259082][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.299194][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.328195][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.432155][ T4446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8'. [ 81.459356][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 81.700481][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 81.709525][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 81.721231][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 81.729508][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 81.744026][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 81.748544][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 81.754392][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 81.830510][ T4453] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 81.910987][ T4453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.912174][ T4453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.913963][ T4453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.915040][ T4453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.919148][ T4453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.921746][ T4453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.923396][ T4453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.924495][ T4453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.925308][ T4453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.926491][ T4453] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 82.022073][ T4435] md: serialize_policy is only effective for raid1 [ 82.091417][ T4435] md: serialize_policy is only effective for raid1 [ 84.513336][ T4465] FAULT_INJECTION: forcing a failure. [ 84.513336][ T4465] name failslab, interval 1, probability 0, space 0, times 1 [ 84.513383][ T4465] CPU: 1 PID: 4465 Comm: syz.1.10 Not tainted syzkaller #0 [ 84.513405][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 84.513416][ T4465] Call Trace: [ 84.513424][ T4465] [ 84.513433][ T4465] dump_stack_lvl+0x188/0x24e [ 84.513472][ T4465] ? show_regs_print_info+0x12/0x12 [ 84.513502][ T4465] ? load_image+0x410/0x410 [ 84.513530][ T4465] ? verify_lock_unused+0x140/0x140 [ 84.513567][ T4465] should_fail_ex+0x390/0x4c0 [ 84.513596][ T4465] should_failslab+0x5/0x20 [ 84.513615][ T4465] slab_pre_alloc_hook+0x59/0x300 [ 84.513645][ T4465] kmem_cache_alloc+0x56/0x2f0 [ 84.513675][ T4465] ? skb_clone+0x1e7/0x370 [ 84.513707][ T4465] skb_clone+0x1e7/0x370 [ 84.513735][ T4465] __netlink_deliver_tap+0x3e4/0x7e0 [ 84.513774][ T4465] ? netlink_deliver_tap+0x2e/0x1b0 [ 84.513801][ T4465] netlink_deliver_tap+0x19c/0x1b0 [ 84.513828][ T4465] netlink_unicast+0x777/0x920 [ 84.513865][ T4465] netlink_sendmsg+0x8ad/0xbd0 [ 84.513901][ T4465] ? netlink_getsockopt+0x550/0x550 [ 84.513930][ T4465] ? apparmor_socket_sendmsg+0x8a/0x330 [ 84.513957][ T4465] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 84.513977][ T4465] ? security_socket_sendmsg+0x7c/0xa0 [ 84.513999][ T4465] ? netlink_getsockopt+0x550/0x550 [ 84.514026][ T4465] ____sys_sendmsg+0x5ed/0x9a0 [ 84.514062][ T4465] ? __sys_sendmsg_sock+0x30/0x30 [ 84.514084][ T4465] ? __import_iovec+0x306/0x510 [ 84.514118][ T4465] ? import_iovec+0x6f/0xa0 [ 84.514147][ T4465] ___sys_sendmsg+0x2a2/0x360 [ 84.514176][ T4465] ? __sys_sendmsg+0x2a0/0x2a0 [ 84.514255][ T4465] __se_sys_sendmsg+0x1c3/0x2b0 [ 84.514283][ T4465] ? __x64_sys_sendmsg+0x80/0x80 [ 84.514325][ T4465] ? lockdep_hardirqs_on+0x94/0x140 [ 84.514351][ T4465] do_syscall_64+0x4c/0xa0 [ 84.514378][ T4465] ? clear_bhb_loop+0x60/0xb0 [ 84.514404][ T4465] ? clear_bhb_loop+0x60/0xb0 [ 84.514434][ T4465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.514459][ T4465] RIP: 0033:0x7fa1175a94d9 [ 84.514479][ T4465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.514495][ T4465] RSP: 002b:00007fa118489028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.514520][ T4465] RAX: ffffffffffffffda RBX: 00007fa117825fa0 RCX: 00007fa1175a94d9 [ 84.514535][ T4465] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 84.514548][ T4465] RBP: 00007fa11763804e R08: 0000000000000000 R09: 0000000000000000 [ 84.514561][ T4465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.514574][ T4465] R13: 00007fa117826038 R14: 00007fa117825fa0 R15: 00007ffe421d3d28 [ 84.514606][ T4465] [ 84.789417][ T4466] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.217235][ T4490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12'. [ 85.704009][ T4479] device-mapper: table: 248:1: ram2 too small for target: start=16, len=8320, dev_size=8192 [ 85.704093][ T4479] device-mapper: core: Cannot calculate initial queue limits [ 85.704103][ T4479] device-mapper: ioctl: unable to set up device queue for new table. [ 85.855779][ T4445] tty tty4: ldisc open failed (-12), clearing slot 3 [ 86.795979][ T956] cfg80211: failed to load regulatory.db [ 86.808206][ T4541] md: serialize_policy is only effective for raid1 [ 86.892594][ T4541] md: serialize_policy is only effective for raid1 [ 86.986394][ T4558] device-mapper: table: 248:4: ram0 too small for target: start=16, len=8320, dev_size=8192 [ 87.016128][ T4558] device-mapper: core: Cannot calculate initial queue limits [ 87.062805][ T4558] device-mapper: ioctl: unable to set up device queue for new table. [ 88.094496][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 88.112894][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 88.131750][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 88.176635][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 88.189513][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 88.201446][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 88.216395][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 88.290625][ T4592] sctp_transport_update_pmtu: 64 callbacks suppressed [ 88.290645][ T4592] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.312026][ T4592] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.322627][ T4592] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.332921][ T4592] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.348756][ T4592] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.359877][ T4592] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.371118][ T4592] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.382745][ T4592] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.395546][ T4592] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 88.409461][ T4592] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 90.115046][ T4590] netlink: 'syz.2.38': attribute type 12 has an invalid length. [ 91.967217][ T4629] gadgetfs: bound to dummy_udc driver [ 92.292894][ T4365] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.323338][ C1] gadgetfs: connected [ 92.407463][ T4365] gadgetfs: disconnected [ 92.552706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.692716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 92.712704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 92.732734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 92.762718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 92.792714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 92.832714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 92.862714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 92.882713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 92.912715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 93.887229][ C1] gadgetfs: connected [ 94.156273][ T4365] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 94.294262][ T4365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.541580][ C1] gadgetfs: configuration #1 [ 94.603305][ T4617] gadgetfs: suspended from state 3 [ 94.811925][ T4617] gadgetfs: disconnected [ 94.874741][ T4365] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 95.204769][ C1] usbtouchscreen 1-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 95.256963][ T4365] usb 1-1: USB disconnect, device number 2 [ 95.815142][ T4636] device-mapper: table: 248:5: crypt: Couldn't create kcryptd io queue (-ENOMEM) [ 96.211899][ T4636] device-mapper: ioctl: error adding target to table [ 99.132135][ T4692] device-mapper: table: 248:7: ram6 too small for target: start=16, len=8320, dev_size=8192 [ 99.216969][ T4692] device-mapper: core: Cannot calculate initial queue limits [ 99.283373][ T4692] device-mapper: ioctl: unable to set up device queue for new table. [ 99.982399][ T4712] gadgetfs: bound to dummy_udc driver [ 101.267558][ T956] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.436998][ T4741] gadgetfs: bound to dummy_udc driver [ 101.492956][ T956] usb 2-1: Using ep0 maxpacket: 8 [ 101.504148][ T956] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 101.535645][ T956] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.565563][ T956] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.601572][ T956] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.617578][ T956] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.646128][ T956] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.670252][ T956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.762764][ T4365] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.777522][ C1] gadgetfs: connected [ 101.782822][ T4365] gadgetfs: disconnected [ 101.920394][ T956] usb 2-1: usb_control_msg returned -32 [ 101.930764][ T956] usbtmc 2-1:16.0: can't read capabilities [ 102.134672][ C1] gadgetfs: connected [ 102.139960][ T4365] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 102.697355][ T4365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.707021][ T4730] gadgetfs: suspended from state 3 [ 102.722777][ T4365] usb 1-1: can't set config #1, error -71 [ 102.731295][ T4730] gadgetfs: disconnected [ 102.749341][ T4365] usb 1-1: USB disconnect, device number 3 [ 103.971414][ T4785] misc userio: Invalid payload size [ 103.990829][ T4785] misc userio: No port type given on /dev/userio [ 104.093582][ T956] usb 2-1: USB disconnect, device number 2 [ 105.598062][ T4809] gadgetfs: bound to dummy_udc driver [ 105.755941][ T4780] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 105.762346][ T4286] Bluetooth: hci0: command 0x0c20 tx timeout [ 106.098281][ T4819] gadgetfs: bound to dummy_udc driver [ 106.382942][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.397346][ C1] gadgetfs: connected [ 106.401612][ T22] gadgetfs: disconnected [ 106.579891][ T4830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.611029][ C1] gadgetfs: connected [ 106.621602][ T22] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 106.630769][ T4812] gadgetfs: suspended from state 3 [ 106.642859][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.663653][ T22] usb 1-1: can't set config #1, error -71 [ 106.671888][ T22] usb 1-1: USB disconnect, device number 4 [ 106.696815][ T4812] gadgetfs: disconnected [ 106.698300][ T4830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.853810][ T4832] misc userio: Invalid payload size [ 106.879643][ T4832] misc userio: No port type given on /dev/userio [ 108.216978][ T26] audit: type=1326 audit(1794725859.734:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4871 comm="syz.0.123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1a9a94d9 code=0x7ffc0000 [ 108.240917][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.311311][ T26] audit: type=1326 audit(1794725859.734:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4871 comm="syz.0.123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1a9a94d9 code=0x7ffc0000 [ 108.335116][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.366723][ T26] audit: type=1326 audit(1794725859.774:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4871 comm="syz.0.123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7faf1a9a94d9 code=0x7ffc0000 [ 108.390567][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.442942][ T26] audit: type=1326 audit(1794725859.774:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4871 comm="syz.0.123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1a9a94d9 code=0x7ffc0000 [ 108.488539][ T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.532737][ T26] audit: type=1326 audit(1794725859.774:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4871 comm="syz.0.123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1a9a94d9 code=0x7ffc0000 [ 108.556669][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.616981][ T26] audit: type=1326 audit(1794725859.774:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4871 comm="syz.0.123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7faf1a9a94d9 code=0x7ffc0000 [ 108.682762][ T26] audit: type=1326 audit(1794725859.774:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4871 comm="syz.0.123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1a9a94d9 code=0x7ffc0000 [ 108.687832][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 108.706648][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.770235][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 108.772749][ T26] audit: type=1326 audit(1794725859.774:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4871 comm="syz.0.123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1a9a94d9 code=0x7ffc0000 [ 108.803733][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.837422][ T22] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.860425][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.876570][ T26] audit: type=1326 audit(1794725859.774:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4871 comm="syz.0.123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf1a9a94d9 code=0x7ffc0000 [ 108.890805][ T22] usb 2-1: Product: syz [ 108.900439][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.957582][ T22] usb 2-1: Manufacturer: syz [ 108.960616][ T26] audit: type=1326 audit(1794725859.774:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4871 comm="syz.0.123" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1a9a94d9 code=0x7ffc0000 [ 108.982639][ T22] usb 2-1: SerialNumber: syz [ 108.986155][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.033820][ T22] usb 2-1: config 0 descriptor?? [ 109.056457][ T4891] misc userio: Invalid payload size [ 109.097792][ T22] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 109.117536][ T4894] misc userio: No port type given on /dev/userio [ 109.155429][ T22] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 109.698430][ T22] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 110.326268][ T22] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 110.392782][ T22] em28xx 2-1:0.0: board has no eeprom [ 110.520983][ T22] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 110.539517][ T22] em28xx 2-1:0.0: dvb set to bulk mode. [ 110.582898][ T22] usb 2-1: USB disconnect, device number 3 [ 110.589472][ T22] em28xx 2-1:0.0: Disconnecting em28xx [ 110.643124][ T4385] em28xx 2-1:0.0: Binding DVB extension [ 110.706625][ T4918] device-mapper: table: 248:6: ram8 too small for target: start=16, len=8320, dev_size=8192 [ 110.757468][ T4918] device-mapper: core: Cannot calculate initial queue limits [ 110.825274][ T4918] device-mapper: ioctl: unable to set up device queue for new table. [ 110.836991][ T4385] em28xx 2-1:0.0: Registering input extension [ 110.853344][ T22] em28xx 2-1:0.0: Closing input extension [ 110.934204][ T22] em28xx 2-1:0.0: Freeing device [ 112.107855][ T4945] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 112.356750][ T4952] misc userio: Invalid payload size [ 112.744711][ T4948] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.152814][ T4282] Bluetooth: hci5: command 0x1003 tx timeout [ 114.159177][ T4286] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.127486][ T5002] FAULT_INJECTION: forcing a failure. [ 115.127486][ T5002] name failslab, interval 1, probability 0, space 0, times 0 [ 115.164159][ T5002] CPU: 0 PID: 5002 Comm: syz.1.164 Not tainted syzkaller #0 [ 115.171524][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 115.181618][ T5002] Call Trace: [ 115.184931][ T5002] [ 115.187895][ T5002] dump_stack_lvl+0x188/0x24e [ 115.192625][ T5002] ? show_regs_print_info+0x12/0x12 [ 115.197864][ T5002] ? load_image+0x410/0x410 [ 115.202496][ T5002] ? __might_sleep+0xd0/0xd0 [ 115.207122][ T5002] ? __lock_acquire+0x7ea0/0x7ea0 [ 115.212194][ T5002] should_fail_ex+0x390/0x4c0 [ 115.216911][ T5002] should_failslab+0x5/0x20 [ 115.221428][ T5002] slab_pre_alloc_hook+0x59/0x300 [ 115.226470][ T5002] kmem_cache_alloc_lru+0x49/0x2e0 [ 115.231588][ T5002] ? ovl_alloc_inode+0x28/0x90 [ 115.236365][ T5002] ? ovl_lookup_inode+0x130/0x130 [ 115.241411][ T5002] ovl_alloc_inode+0x28/0x90 [ 115.246006][ T5002] ? ovl_d_real+0x490/0x490 [ 115.250548][ T5002] iget5_locked+0x9e/0x260 [ 115.254978][ T5002] ? ovl_get_trap_inode+0x190/0x190 [ 115.260191][ T5002] ovl_get_inode+0x5a5/0xd40 [ 115.264809][ T5002] ? ovl_inode_set+0x40/0x40 [ 115.269419][ T5002] ? ovl_alloc_entry+0x20/0x80 [ 115.274202][ T5002] ? rcu_is_watching+0x11/0xa0 [ 115.278994][ T5002] ? ovl_alloc_entry+0x20/0x80 [ 115.283793][ T5002] ? __kmalloc+0xe4/0x240 [ 115.288161][ T5002] ovl_lookup+0x159e/0x18d0 [ 115.292711][ T5002] ? ovl_path_next+0x260/0x260 [ 115.297489][ T5002] ? lockdep_softirqs_off+0x430/0x430 [ 115.302875][ T5002] ? d_hash_and_lookup+0x1b0/0x1b0 [ 115.308042][ T5002] ? __init_waitqueue_head+0xa4/0x140 [ 115.313437][ T5002] __lookup_slow+0x29d/0x3f0 [ 115.318041][ T5002] ? lookup_one_len+0x2d0/0x2d0 [ 115.322914][ T5002] ? down_read+0x1a8/0x2d0 [ 115.327341][ T5002] lookup_slow+0x53/0x70 [ 115.331593][ T5002] walk_component+0x2ad/0x3e0 [ 115.336295][ T5002] path_lookupat+0x148/0x420 [ 115.340898][ T5002] filename_lookup+0x229/0x580 [ 115.345675][ T5002] ? hashlen_string+0x110/0x110 [ 115.350553][ T5002] ? strncpy_from_user+0x1dc/0x340 [ 115.355678][ T5002] ? getname_flags+0x206/0x500 [ 115.360541][ T5002] user_path_at_empty+0x3e/0x60 [ 115.365433][ T5002] do_fchmodat+0xa3/0x1a0 [ 115.369779][ T5002] ? do_faccessat+0x9e0/0x9e0 [ 115.374478][ T5002] __x64_sys_fchmodat+0x77/0x90 [ 115.379349][ T5002] do_syscall_64+0x4c/0xa0 [ 115.383784][ T5002] ? clear_bhb_loop+0x60/0xb0 [ 115.388472][ T5002] ? clear_bhb_loop+0x60/0xb0 [ 115.393168][ T5002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.399071][ T5002] RIP: 0033:0x7fa1175a94d9 [ 115.403498][ T5002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.423139][ T5002] RSP: 002b:00007fa118489028 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 115.431563][ T5002] RAX: ffffffffffffffda RBX: 00007fa117825fa0 RCX: 00007fa1175a94d9 [ 115.439542][ T5002] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 115.447518][ T5002] RBP: 00007fa11763804e R08: 0000000000000000 R09: 0000000000000000 [ 115.455496][ T5002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.463475][ T5002] R13: 00007fa117826038 R14: 00007fa117825fa0 R15: 00007ffe421d3d28 [ 115.471468][ T5002] [ 115.495978][ T5006] misc userio: Invalid payload size [ 115.623114][ T5002] overlayfs: failed to get inode (-12) [ 116.090117][ T5020] gadgetfs: bound to dummy_udc driver [ 117.056187][ T5032] smc: net device lo applied user defined pnetid SYZ2 [ 117.976526][ T5046] 9pnet_virtio: no channels available for device syz [ 118.391231][ T5057] misc userio: Invalid payload size [ 118.852127][ T5065] gadgetfs: bound to dummy_udc driver [ 119.157508][ T5069] FAULT_INJECTION: forcing a failure. [ 119.157508][ T5069] name failslab, interval 1, probability 0, space 0, times 0 [ 119.183120][ T4372] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.204201][ C0] gadgetfs: connected [ 119.208488][ T4372] gadgetfs: disconnected [ 119.343652][ T5069] CPU: 0 PID: 5069 Comm: syz.4.182 Not tainted syzkaller #0 [ 119.351020][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 119.361102][ T5069] Call Trace: [ 119.364404][ T5069] [ 119.367361][ T5069] dump_stack_lvl+0x188/0x24e [ 119.372090][ T5069] ? show_regs_print_info+0x12/0x12 [ 119.377330][ T5069] ? load_image+0x410/0x410 [ 119.381871][ T5069] ? __might_sleep+0xd0/0xd0 [ 119.386491][ T5069] ? __lock_acquire+0x7ea0/0x7ea0 [ 119.391559][ T5069] should_fail_ex+0x390/0x4c0 [ 119.396279][ T5069] should_failslab+0x5/0x20 [ 119.400811][ T5069] slab_pre_alloc_hook+0x59/0x300 [ 119.405872][ T5069] ? lockdep_softirqs_off+0x430/0x430 [ 119.411288][ T5069] kmem_cache_alloc+0x56/0x2f0 [ 119.416080][ T5069] ? seq_open+0x5e/0x130 [ 119.420365][ T5069] seq_open+0x5e/0x130 [ 119.424472][ T5069] kernfs_fop_open+0x520/0xc60 [ 119.429275][ T5069] ? fsnotify_perm+0x248/0x550 [ 119.434077][ T5069] ? kernfs_fop_mmap+0x570/0x570 [ 119.439050][ T5069] do_dentry_open+0x7dd/0x10b0 [ 119.443875][ T5069] path_openat+0x2674/0x2f10 [ 119.448520][ T5069] ? kasan_set_track+0x60/0x70 [ 119.453323][ T5069] ? verify_lock_unused+0x140/0x140 [ 119.458556][ T5069] ? do_sys_openat2+0xdd/0x4f0 [ 119.463361][ T5069] ? do_filp_open+0x420/0x420 [ 119.468095][ T5069] do_filp_open+0x1ee/0x420 [ 119.472639][ T5069] ? vfs_tmpfile+0x490/0x490 [ 119.477288][ T5069] ? _raw_spin_unlock+0x24/0x40 [ 119.482173][ T5069] ? alloc_fd+0x590/0x640 [ 119.486546][ T5069] do_sys_openat2+0x14b/0x4f0 [ 119.491267][ T5069] ? do_sys_open+0xe0/0xe0 [ 119.495731][ T5069] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 119.501751][ T5069] ? lock_chain_count+0x20/0x20 [ 119.506642][ T5069] __x64_sys_openat+0x135/0x160 [ 119.511544][ T5069] do_syscall_64+0x4c/0xa0 [ 119.515997][ T5069] ? clear_bhb_loop+0x60/0xb0 [ 119.520717][ T5069] ? clear_bhb_loop+0x60/0xb0 [ 119.525455][ T5069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 119.531381][ T5069] RIP: 0033:0x7f7f2f3a94d9 [ 119.535827][ T5069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.555463][ T5069] RSP: 002b:00007f7f3021c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.563910][ T5069] RAX: ffffffffffffffda RBX: 00007f7f2f625fa0 RCX: 00007f7f2f3a94d9 [ 119.571912][ T5069] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 119.579914][ T5069] RBP: 00007f7f2f43804e R08: 0000000000000000 R09: 0000000000000000 [ 119.587911][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.595910][ T5069] R13: 00007f7f2f626038 R14: 00007f7f2f625fa0 R15: 00007ffe508a51b8 [ 119.603928][ T5069] [ 119.652978][ C0] gadgetfs: connected [ 119.657772][ T4372] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 119.667214][ T4372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.725347][ C0] gadgetfs: configuration #1 [ 119.753080][ T4372] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 119.764905][ T5062] gadgetfs: suspended from state 3 [ 119.809052][ T5062] gadgetfs: disconnected [ 119.896022][ T4372] usb 1-1: USB disconnect, device number 5 [ 121.873216][ T5099] FAULT_INJECTION: forcing a failure. [ 121.873216][ T5099] name failslab, interval 1, probability 0, space 0, times 0 [ 121.963827][ T5101] 9pnet_virtio: no channels available for device syz [ 121.970496][ T5099] CPU: 1 PID: 5099 Comm: syz.4.191 Not tainted syzkaller #0 [ 121.970547][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 121.970559][ T5099] Call Trace: [ 121.970566][ T5099] [ 121.994183][ T5099] dump_stack_lvl+0x188/0x24e [ 121.998916][ T5099] ? show_regs_print_info+0x12/0x12 [ 122.004163][ T5099] ? load_image+0x410/0x410 [ 122.008720][ T5099] ? __might_sleep+0xd0/0xd0 [ 122.013352][ T5099] ? __lock_acquire+0x7ea0/0x7ea0 [ 122.018426][ T5099] should_fail_ex+0x390/0x4c0 [ 122.023157][ T5099] should_failslab+0x5/0x20 [ 122.027699][ T5099] slab_pre_alloc_hook+0x59/0x300 [ 122.029774][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 122.029787][ T26] audit: type=1800 audit(1794725873.544:14): pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.193" name="power" dev="configfs" ino=36189 res=0 errno=0 [ 122.032747][ T5099] ? zone_statistics+0x170/0x170 [ 122.032784][ T5099] ? cuse_channel_open+0x1a8/0x640 [ 122.032822][ T5099] __kmem_cache_alloc_node+0x4f/0x270 [ 122.032848][ T5099] ? cuse_channel_open+0x1a8/0x640 [ 122.032878][ T5099] kmalloc_trace+0x26/0xe0 [ 122.032899][ T5099] cuse_channel_open+0x1a8/0x640 [ 122.032926][ T5099] ? __kobject_del+0x2e0/0x2e0 [ 122.032948][ T5099] ? fuse_dax_writepages+0xe0/0xe0 [ 122.032979][ T5099] misc_open+0x31f/0x390 [ 122.033005][ T5099] chrdev_open+0x585/0x5f0 [ 122.033033][ T5099] ? cd_forget+0x160/0x160 [ 122.033062][ T5099] ? fsnotify_perm+0x39b/0x550 [ 122.033093][ T5099] ? cd_forget+0x160/0x160 [ 122.033117][ T5099] do_dentry_open+0x7dd/0x10b0 [ 122.033159][ T5099] path_openat+0x2674/0x2f10 [ 122.130615][ T5099] ? kasan_set_track+0x60/0x70 [ 122.135437][ T5099] ? verify_lock_unused+0x140/0x140 [ 122.140679][ T5099] ? do_sys_openat2+0xdd/0x4f0 [ 122.145492][ T5099] ? do_filp_open+0x420/0x420 [ 122.150228][ T5099] do_filp_open+0x1ee/0x420 [ 122.154784][ T5099] ? vfs_tmpfile+0x490/0x490 [ 122.159443][ T5099] ? _raw_spin_unlock+0x24/0x40 [ 122.164334][ T5099] ? alloc_fd+0x590/0x640 [ 122.168713][ T5099] do_sys_openat2+0x14b/0x4f0 [ 122.173441][ T5099] ? do_sys_open+0xe0/0xe0 [ 122.177898][ T5099] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.183927][ T5099] ? lock_chain_count+0x20/0x20 [ 122.188833][ T5099] __x64_sys_openat+0x135/0x160 [ 122.193734][ T5099] do_syscall_64+0x4c/0xa0 [ 122.198196][ T5099] ? clear_bhb_loop+0x60/0xb0 [ 122.202916][ T5099] ? clear_bhb_loop+0x60/0xb0 [ 122.207637][ T5099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.213573][ T5099] RIP: 0033:0x7f7f2f3a94d9 [ 122.218026][ T5099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.237668][ T5099] RSP: 002b:00007f7f3021c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.246124][ T5099] RAX: ffffffffffffffda RBX: 00007f7f2f625fa0 RCX: 00007f7f2f3a94d9 [ 122.254135][ T5099] RDX: 0000000000000002 RSI: 0000200000000d00 RDI: ffffffffffffff9c [ 122.262134][ T5099] RBP: 00007f7f2f43804e R08: 0000000000000000 R09: 0000000000000000 [ 122.270116][ T5099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.278097][ T5099] R13: 00007f7f2f626038 R14: 00007f7f2f625fa0 R15: 00007ffe508a51b8 [ 122.286097][ T5099] [ 122.372814][ T5108] IPv6: addrconf: prefix option has invalid lifetime [ 123.082793][ T4385] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.583013][ T4385] usb 1-1: Using ep0 maxpacket: 8 [ 123.883455][ T4385] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.111761][ T4385] usb 1-1: config 14 has an invalid interface number: 154 but max is 1 [ 124.120156][ T4385] usb 1-1: config 14 has an invalid interface number: 65 but max is 1 [ 124.128822][ T4385] usb 1-1: config 14 has no interface number 0 [ 124.135262][ T4385] usb 1-1: config 14 has no interface number 1 [ 124.141490][ T4385] usb 1-1: config 14 interface 65 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 124.152512][ T4385] usb 1-1: config 14 interface 65 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 124.197988][ T4385] usb 1-1: config 14 interface 154 has no altsetting 0 [ 124.211974][ T4385] usb 1-1: config 14 interface 65 has no altsetting 0 [ 124.670215][ T4385] usb 1-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=c3.93 [ 124.679463][ T4385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.688595][ T4385] usb 1-1: Product: syz [ 124.693019][ T4385] usb 1-1: Manufacturer: syz [ 124.703147][ T4385] usb 1-1: SerialNumber: syz [ 125.199349][ T5124] process 'syz.0.201' launched './file0' with NULL argv: empty string added [ 125.229543][ T4385] snd-usb-audio: probe of 1-1:14.154 failed with error -2 [ 125.439072][ T5121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.459496][ T5121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.586550][ T4385] snd-usb-audio: probe of 1-1:14.65 failed with error -2 [ 125.615893][ T4385] usb 1-1: USB disconnect, device number 6 [ 125.695115][ T5172] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 125.900427][ T4652] udevd[4652]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:14.65/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.531268][ T5225] gadgetfs: bound to dummy_udc driver [ 127.604349][ T26] audit: type=1800 audit(1794725879.124:15): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.225" name="protocol" dev="configfs" ino=36964 res=0 errno=0 [ 127.660283][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.741115][ T5218] md: serialize_policy is only effective for raid1 [ 127.792866][ T4373] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.817638][ C0] gadgetfs: connected [ 127.828095][ T4373] gadgetfs: disconnected [ 128.033103][ C0] gadgetfs: connected [ 128.040030][ T4373] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 128.044742][ T5213] gadgetfs: suspended from state 3 [ 128.062355][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.094758][ T5213] gadgetfs: disconnected [ 128.106651][ T4373] usb 1-1: can't set config #1, error -71 [ 128.131560][ T4373] usb 1-1: USB disconnect, device number 7 [ 128.421709][ T5241] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 132.875954][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.882351][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.238592][ T5357] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 135.565636][ T5366] netlink: 'syz.1.264': attribute type 5 has an invalid length. [ 135.598346][ T5366] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.607516][ T5366] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.616294][ T5366] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.625057][ T5366] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.157107][ T4286] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 136.166313][ T4286] Bluetooth: hci4: Injecting HCI hardware error event [ 136.172823][ T5387] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 136.175582][ T4282] Bluetooth: hci4: hardware error 0x00 [ 136.317349][ T4385] ================================================================== [ 136.325476][ T4385] BUG: KASAN: use-after-free in hci_chan_del+0x36/0x1a0 [ 136.332431][ T4385] Read of size 8 at addr ffff88802a79e418 by task kworker/1:6/4385 [ 136.340321][ T4385] [ 136.342647][ T4385] CPU: 1 PID: 4385 Comm: kworker/1:6 Not tainted syzkaller #0 [ 136.350113][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 136.360170][ T4385] Workqueue: events delayed_fput [ 136.365118][ T4385] Call Trace: [ 136.368405][ T4385] [ 136.371346][ T4385] dump_stack_lvl+0x188/0x24e [ 136.376063][ T4385] ? __lock_acquire+0x7ea0/0x7ea0 [ 136.381096][ T4385] ? show_regs_print_info+0x12/0x12 [ 136.386483][ T4385] ? load_image+0x410/0x410 [ 136.391018][ T4385] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 136.396488][ T4385] ? __virt_addr_valid+0x188/0x540 [ 136.401609][ T4385] ? __virt_addr_valid+0x467/0x540 [ 136.406736][ T4385] ? hci_chan_del+0x36/0x1a0 [ 136.411331][ T4385] print_report+0xa8/0x210 [ 136.415753][ T4385] kasan_report+0x10b/0x140 [ 136.420265][ T4385] ? hci_chan_del+0x36/0x1a0 [ 136.425857][ T4385] hci_chan_del+0x36/0x1a0 [ 136.430299][ T4385] l2cap_chan_put+0x1f5/0x300 [ 136.435029][ T4385] l2cap_sock_release+0x179/0x1e0 [ 136.440089][ T4385] sock_close+0xbf/0x210 [ 136.444345][ T4385] ? sock_mmap+0x90/0x90 [ 136.448596][ T4385] __fput+0x20a/0x8b0 [ 136.452589][ T4385] ? process_one_work+0x7b4/0x1160 [ 136.457710][ T4385] delayed_fput+0x54/0x80 [ 136.462070][ T4385] process_one_work+0x8ab/0x1160 [ 136.467017][ T4385] ? worker_detach_from_pool+0x240/0x240 [ 136.472674][ T4385] ? _raw_spin_lock_irq+0xb7/0xf0 [ 136.477720][ T4385] ? _raw_spin_lock_irqsave+0x100/0x100 [ 136.483281][ T4385] ? wq_worker_running+0x97/0x190 [ 136.488310][ T4385] worker_thread+0xaf5/0x12a0 [ 136.492999][ T4385] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 136.498902][ T4385] kthread+0x29d/0x330 [ 136.502977][ T4385] ? worker_clr_flags+0x1a0/0x1a0 [ 136.508007][ T4385] ? kthread_blkcg+0xd0/0xd0 [ 136.512615][ T4385] ret_from_fork+0x1f/0x30 [ 136.517077][ T4385] [ 136.520104][ T4385] [ 136.522434][ T4385] Allocated by task 4286: [ 136.526766][ T4385] kasan_set_track+0x4b/0x70 [ 136.531368][ T4385] __kasan_kmalloc+0x8e/0xa0 [ 136.535970][ T4385] hci_chan_create+0xc5/0x300 [ 136.540659][ T4385] l2cap_conn_add+0x5d/0x910 [ 136.545255][ T4385] l2cap_connect_cfm+0x131/0x1230 [ 136.550282][ T4385] hci_remote_features_evt+0x4cc/0xa10 [ 136.555751][ T4385] hci_event_packet+0x66a/0xe60 [ 136.560617][ T4385] hci_rx_work+0x3eb/0xd40 [ 136.565040][ T4385] process_one_work+0x8ab/0x1160 [ 136.570001][ T4385] worker_thread+0xaf5/0x12a0 [ 136.574680][ T4385] kthread+0x29d/0x330 [ 136.578752][ T4385] ret_from_fork+0x1f/0x30 [ 136.583174][ T4385] [ 136.585499][ T4385] Freed by task 4282: [ 136.589478][ T4385] kasan_set_track+0x4b/0x70 [ 136.594075][ T4385] kasan_save_free_info+0x27/0x40 [ 136.599103][ T4385] ____kasan_slab_free+0x126/0x1f0 [ 136.604221][ T4385] slab_free_freelist_hook+0x133/0x1b0 [ 136.609681][ T4385] __kmem_cache_free+0xb6/0x200 [ 136.614534][ T4385] hci_conn_cleanup+0x171/0x750 [ 136.619390][ T4385] hci_conn_del+0x4df/0x6e0 [ 136.623899][ T4385] hci_conn_hash_flush+0x203/0x290 [ 136.629019][ T4385] hci_dev_close_sync+0x989/0x10a0 [ 136.634134][ T4385] hci_error_reset+0x120/0x390 [ 136.638899][ T4385] process_one_work+0x8ab/0x1160 [ 136.643841][ T4385] worker_thread+0xaf5/0x12a0 [ 136.648539][ T4385] kthread+0x29d/0x330 [ 136.652605][ T4385] ret_from_fork+0x1f/0x30 [ 136.657030][ T4385] [ 136.659356][ T4385] Last potentially related work creation: [ 136.665070][ T4385] kasan_save_stack+0x3a/0x60 [ 136.669770][ T4385] __kasan_record_aux_stack+0xb2/0xc0 [ 136.675145][ T4385] kvfree_call_rcu+0x103/0x890 [ 136.679918][ T4385] kernfs_unlink_open_file+0x456/0x500 [ 136.685380][ T4385] kernfs_fop_release+0x12a/0x190 [ 136.690411][ T4385] __fput+0x20a/0x8b0 [ 136.694397][ T4385] task_work_run+0x1d0/0x260 [ 136.698993][ T4385] exit_to_user_mode_loop+0xe6/0x110 [ 136.704288][ T4385] exit_to_user_mode_prepare+0xee/0x180 [ 136.709840][ T4385] syscall_exit_to_user_mode+0x16/0x40 [ 136.715303][ T4385] do_syscall_64+0x58/0xa0 [ 136.719727][ T4385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.725629][ T4385] [ 136.727970][ T4385] Second to last potentially related work creation: [ 136.734562][ T4385] kasan_save_stack+0x3a/0x60 [ 136.739257][ T4385] __kasan_record_aux_stack+0xb2/0xc0 [ 136.744645][ T4385] kvfree_call_rcu+0x103/0x890 [ 136.749432][ T4385] kernfs_unlink_open_file+0x456/0x500 [ 136.754899][ T4385] kernfs_fop_release+0x12a/0x190 [ 136.759930][ T4385] __fput+0x20a/0x8b0 [ 136.763917][ T4385] task_work_run+0x1d0/0x260 [ 136.768514][ T4385] exit_to_user_mode_loop+0xe6/0x110 [ 136.773806][ T4385] exit_to_user_mode_prepare+0xee/0x180 [ 136.779360][ T4385] syscall_exit_to_user_mode+0x16/0x40 [ 136.784821][ T4385] do_syscall_64+0x58/0xa0 [ 136.789247][ T4385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.795148][ T4385] [ 136.797476][ T4385] The buggy address belongs to the object at ffff88802a79e400 [ 136.797476][ T4385] which belongs to the cache kmalloc-128 of size 128 [ 136.811533][ T4385] The buggy address is located 24 bytes inside of [ 136.811533][ T4385] 128-byte region [ffff88802a79e400, ffff88802a79e480) [ 136.824722][ T4385] [ 136.827050][ T4385] The buggy address belongs to the physical page: [ 136.833457][ T4385] page:ffffea0000a9e780 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802a79ec00 pfn:0x2a79e [ 136.844912][ T4385] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 136.852472][ T4385] raw: 00fff00000000200 ffffea0001d5c2c8 ffffea0000c76a48 ffff8880184418c0 [ 136.861144][ T4385] raw: ffff88802a79ec00 000000000010000c 00000001ffffffff 0000000000000000 [ 136.869729][ T4385] page dumped because: kasan: bad access detected [ 136.876138][ T4385] page_owner tracks the page as allocated [ 136.881867][ T4385] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 3645, tgid 3645 (udevd), ts 31124918767, free_ts 28855623167 [ 136.899582][ T4385] post_alloc_hook+0x173/0x1a0 [ 136.904356][ T4385] get_page_from_freelist+0x206b/0x2180 [ 136.909908][ T4385] __alloc_pages+0x1ec/0x4f0 [ 136.914507][ T4385] alloc_slab_page+0x5d/0x180 [ 136.919196][ T4385] new_slab+0x87/0x2d0 [ 136.923268][ T4385] ___slab_alloc+0xbc5/0x1240 [ 136.927951][ T4385] __kmem_cache_alloc_node+0x126/0x270 [ 136.933411][ T4385] kmalloc_trace+0x26/0xe0 [ 136.937850][ T4385] kernfs_fop_open+0x78c/0xc60 [ 136.942616][ T4385] do_dentry_open+0x7dd/0x10b0 [ 136.947388][ T4385] path_openat+0x2674/0x2f10 [ 136.951979][ T4385] do_filp_open+0x1ee/0x420 [ 136.956483][ T4385] do_sys_openat2+0x14b/0x4f0 [ 136.961165][ T4385] __x64_sys_openat+0x135/0x160 [ 136.966027][ T4385] do_syscall_64+0x4c/0xa0 [ 136.970453][ T4385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.976353][ T4385] page last free stack trace: [ 136.981040][ T4385] free_unref_page_prepare+0x8e5/0x9e0 [ 136.986509][ T4385] free_unref_page+0x2e/0x3f0 [ 136.991197][ T4385] __unfreeze_partials+0x188/0x1e0 [ 136.996312][ T4385] put_cpu_partial+0x17c/0x250 [ 137.001097][ T4385] qlist_free_all+0x76/0xe0 [ 137.005606][ T4385] kasan_quarantine_reduce+0x144/0x160 [ 137.011157][ T4385] __kasan_slab_alloc+0x1e/0x80 [ 137.016016][ T4385] slab_post_alloc_hook+0x4b/0x490 [ 137.021133][ T4385] __kmem_cache_alloc_node+0x19d/0x270 [ 137.026593][ T4385] __kmalloc+0xa3/0x240 [ 137.030747][ T4385] tomoyo_realpath_from_path+0xe2/0x5c0 [ 137.036296][ T4385] tomoyo_check_open_permission+0x212/0x440 [ 137.042201][ T4385] security_file_open+0x5e/0xa0 [ 137.047050][ T4385] do_dentry_open+0x2fd/0x10b0 [ 137.051822][ T4385] path_openat+0x2674/0x2f10 [ 137.056417][ T4385] do_filp_open+0x1ee/0x420 [ 137.060926][ T4385] [ 137.063251][ T4385] Memory state around the buggy address: [ 137.068878][ T4385] ffff88802a79e300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.076938][ T4385] ffff88802a79e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.084998][ T4385] >ffff88802a79e400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.093059][ T4385] ^ [ 137.097905][ T4385] ffff88802a79e480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.105963][ T4385] ffff88802a79e500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.114020][ T4385] ================================================================== [ 137.469045][ T4385] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.476310][ T4385] CPU: 1 PID: 4385 Comm: kworker/1:6 Not tainted syzkaller #0 [ 137.483797][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 137.494050][ T4385] Workqueue: events delayed_fput [ 137.499025][ T4385] Call Trace: [ 137.502320][ T4385] [ 137.505273][ T4385] dump_stack_lvl+0x188/0x24e [ 137.509983][ T4385] ? memcpy+0x3c/0x60 [ 137.513993][ T4385] ? show_regs_print_info+0x12/0x12 [ 137.519225][ T4385] ? load_image+0x410/0x410 [ 137.523760][ T4385] panic+0x2d3/0x710 [ 137.527680][ T4385] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 137.533859][ T4385] ? bpf_jit_dump+0xd0/0xd0 [ 137.538390][ T4385] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 137.544399][ T4385] ? _raw_spin_unlock+0x40/0x40 [ 137.549280][ T4385] check_panic_on_warn+0x80/0xa0 [ 137.554243][ T4385] ? hci_chan_del+0x36/0x1a0 [ 137.558862][ T4385] end_report+0x66/0x110 [ 137.563137][ T4385] kasan_report+0x118/0x140 [ 137.567679][ T4385] ? hci_chan_del+0x36/0x1a0 [ 137.572302][ T4385] hci_chan_del+0x36/0x1a0 [ 137.576750][ T4385] l2cap_chan_put+0x1f5/0x300 [ 137.581461][ T4385] l2cap_sock_release+0x179/0x1e0 [ 137.586511][ T4385] sock_close+0xbf/0x210 [ 137.590786][ T4385] ? sock_mmap+0x90/0x90 [ 137.595055][ T4385] __fput+0x20a/0x8b0 [ 137.599068][ T4385] ? process_one_work+0x7b4/0x1160 [ 137.604215][ T4385] delayed_fput+0x54/0x80 [ 137.608576][ T4385] process_one_work+0x8ab/0x1160 [ 137.613546][ T4385] ? worker_detach_from_pool+0x240/0x240 [ 137.619217][ T4385] ? _raw_spin_lock_irq+0xb7/0xf0 [ 137.624279][ T4385] ? _raw_spin_lock_irqsave+0x100/0x100 [ 137.629869][ T4385] ? wq_worker_running+0x97/0x190 [ 137.634928][ T4385] worker_thread+0xaf5/0x12a0 [ 137.639670][ T4385] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 137.645609][ T4385] kthread+0x29d/0x330 [ 137.649699][ T4385] ? worker_clr_flags+0x1a0/0x1a0 [ 137.654755][ T4385] ? kthread_blkcg+0xd0/0xd0 [ 137.659369][ T4385] ret_from_fork+0x1f/0x30 [ 137.663823][ T4385] [ 137.666990][ T4385] Kernel Offset: disabled [ 137.671315][ T4385] Rebooting in 86400 seconds..